Alerts

Alerts are configurable via the Events menu, with options of how, where, and why alerts should be sent. By default, events are logged in the event log; support staff notification occurs only if they examine the CSA MC screens. To take a more proactive approach to managing security-impacting events, configure alerts for notification.

To configure an alert from the Alerts page, click the New button. As with all other configurable items, you need to configure a name and a description for the alert. After the Name and Description fields, you see the following configuration information, as shown in Figure 8-20:

  • Send Alerts for the Following Event Sets— Specify the event set match that will trigger alerts. You must configure an event set to ...

Get Cisco Security Agent now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.